Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa
File:                     67e9a890-c640-3faf-80ae-71476177faba.roa (raw, json)
Hash identifier:          KmaUdd1dReu9LkFWd138rwJRXbDugIhOwHreeNikH7g=
Subject key identifier:   06:6B:7A:F0:C5:53:35:7E:C1:3D:64:F9:9E:AC:38:09:D6:B4:7B:56
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F43285848BE861CC0C4F367B605C04880
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     401466
IP address blocks:        23.129.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:1c:c0:c4:f3:67:b6:05:c0:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=c60288a7-9029-4aa9-91f8-99808c140858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:d3:f9:f8:e6:aa:2e:5e:6d:1f:76:76:65:
                    18:5a:dd:c4:bb:e8:b6:f2:73:72:ee:a2:f8:8a:4f:
                    5a:81:6a:83:2c:59:16:97:53:07:93:ab:39:a1:04:
                    75:5f:98:d8:f1:ed:87:d4:b1:25:1d:a0:ad:26:f3:
                    5d:85:4f:f9:ac:2c:08:68:7b:1f:9a:e9:84:c3:98:
                    50:f3:1b:d5:fd:d7:28:b7:11:68:f7:fa:bb:1f:02:
                    2f:65:34:c5:89:c7:c9:04:78:2f:f8:25:3a:eb:24:
                    39:05:eb:a8:5c:c4:b0:62:47:27:91:ef:73:5a:4e:
                    c0:2d:38:c7:d5:01:ed:8a:a6:ba:a3:f3:fe:15:3d:
                    d7:e2:4b:f2:64:ec:98:04:ec:ca:22:95:db:a0:97:
                    e2:8e:5e:3d:08:f9:ca:01:97:19:27:7f:ef:9f:c0:
                    54:ca:21:5f:16:0d:da:a4:2b:7f:4d:8d:48:ee:b9:
                    8f:85:d2:ad:07:13:75:3e:88:95:f3:c0:c4:aa:90:
                    40:90:bb:db:0f:90:21:06:13:74:3e:57:9e:d2:dd:
                    cd:40:82:69:d3:e8:42:6d:ac:91:89:67:62:e5:44:
                    74:9a:de:cf:b5:19:ab:dc:76:d2:7b:8b:b9:76:4f:
                    2a:f3:9a:27:3e:cb:bd:b3:c5:cc:23:89:26:0d:44:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6B:7A:F0:C5:53:35:7E:C1:3D:64:F9:9E:AC:38:09:D6:B4:7B:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:60:13:23:1a:66:4c:07:06:3a:d2:41:2b:27:02:02:ea:c1:
         9f:5e:ec:8a:1f:c7:6c:07:35:f0:65:75:f3:40:fd:25:63:1f:
         cb:fc:7b:9d:74:fd:2a:7f:72:4f:c7:f2:29:cf:42:b7:cf:3c:
         88:5f:78:72:9c:7c:8a:5f:51:1e:77:00:6e:71:40:5c:08:29:
         25:15:aa:93:d6:26:b8:d4:eb:e9:2f:5b:d7:f5:fc:76:be:26:
         d2:7c:fd:f3:b1:e9:0d:ad:e7:7a:80:ef:c9:62:df:4d:50:7e:
         71:d3:3f:6d:90:43:b2:03:57:8d:56:e9:ba:36:97:b8:5d:94:
         b3:25:4b:43:6f:5f:97:d2:f3:c8:c6:5b:23:8a:d5:9f:ac:d1:
         78:7b:e7:72:34:50:43:7b:e0:4e:ba:4e:59:45:35:58:ab:8a:
         45:bf:6a:ef:f0:1c:f4:e8:21:bc:54:29:1a:8c:bf:b2:20:15:
         4a:43:1b:b2:24:9b:02:21:a9:c9:f8:be:8d:57:0e:7d:7e:22:
         5c:5f:4d:e2:40:ce:a0:64:e4:df:cc:f9:80:b2:0d:ad:97:83:
         f6:93:c9:4b:37:06:5d:b0:e7:7e:9a:ec:3f:e7:59:73:f5:57:
         e2:bd:ad:24:9f:8a:f5:a8:3b:6e:c5:13:98:ce:c6:24:ef:d9:
         20:bb:04:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:46:59 2025 by rpki-client